$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft File: FWPM6JxbrDwQTe02KznzsvJZ8BA.mft (raw, json) Hash identifier: HKBpaf48WI1StXBNmOTZaj6i2QCBuCIDFcW6LwCbeXc= Subject key identifier: 8C:7D:64:D5:8E:32:FA:63:0B:CE:20:7F:2F:97:FE:52:18:DA:81:69 Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 Certificate issuer: /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Certificate serial: 0F7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft Manifest number: 0F6A Signing time: Thu 02 May 2024 18:13:42 +0000 Manifest this update: Thu 02 May 2024 18:13:42 +0000 Manifest next update: Thu 09 May 2024 18:13:42 +0000 Files and hashes: 1: FWPM6JxbrDwQTe02KznzsvJZ8BA.crl (hash: mQ6kUnzW0cywigXW/VgN2TbKR3GkzQLttbRzsWT9rmw=) 2: 0E37BE12773E11ECAD064E68C4F9AE02.roa (hash: UIDG4hidGjMCuqQe/KhvxpXKsRwNmql3jj/jGdPw3CQ=) 3: 98783026EB5F11ECB4060F86C4F9AE02.roa (hash: 5KLzaxwqFiAw/m64WegkLhB0ZcHulm0eyER2YrcckJw=) 4: 975940EAEB5F11ECB4060F86C4F9AE02.roa (hash: wPpVepx4FFYkvB6w6kZLIAZjBiXcOD593qeyNz3X4N4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3966 (0xf7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Validity Not Before: May 2 18:13:42 2024 GMT Not After : May 9 18:13:42 2024 GMT Subject: CN=6633d7d6-6b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cd:13:a6:1a:0d:f6:04:da:4f:93:49:9b:42: c9:e8:df:a9:0a:9e:1a:7a:1e:71:86:b9:ad:54:cb: f3:cb:8c:16:5c:1c:2a:33:d2:9e:76:fb:f6:2f:ac: b4:5f:be:51:ba:26:d5:6a:ab:24:e1:29:5c:e2:a8: 1f:58:fe:d2:b3:e6:00:da:2a:25:8c:99:52:96:ef: 9c:72:dd:03:7d:c6:7b:ad:95:61:bb:49:e5:b5:35: 60:a9:56:06:f5:12:96:36:14:e0:3a:c2:a9:c8:81: 1f:80:de:f9:c2:61:46:a6:ba:56:f1:1b:86:b2:26: b3:58:d5:6c:f8:a8:76:ed:46:9f:ba:fe:90:bf:fb: 96:ce:3f:57:17:6f:c6:c2:c6:c3:02:cc:19:e5:cd: 58:cf:f5:ae:01:85:37:cf:21:17:58:a2:34:93:57: 0c:7c:79:33:96:7c:0f:41:5e:b2:f9:ff:79:9f:5a: c8:da:8f:03:7a:23:79:fe:34:f9:0b:32:11:ee:48: cb:54:5d:5d:53:ba:dc:b6:d9:7b:c6:92:cd:fa:b0: 43:bd:ab:0d:c4:00:bc:1e:b1:f1:3e:68:72:03:2e: 7a:8f:d1:24:ba:00:3d:be:86:bb:9d:ca:82:cb:86: 3f:7a:84:93:ad:ce:9e:bd:fa:33:e4:10:77:53:77: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7D:64:D5:8E:32:FA:63:0B:CE:20:7F:2F:97:FE:52:18:DA:81:69 X509v3 Authority Key Identifier: keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:86:4e:6a:61:d7:5c:fc:ed:8e:bb:bc:e7:2f:48:18:a5:6c: 75:1f:bc:1b:e0:c5:c4:ff:d2:41:f6:2e:2b:d8:cf:9d:84:86: 2b:98:c1:98:85:e8:a2:d1:41:8b:6e:00:4c:9f:c6:4d:55:70: 76:76:9f:95:82:10:94:4f:40:bc:0f:a8:61:27:6c:38:f1:38: 2b:11:cb:91:22:42:95:4a:c0:a7:0c:e2:11:e2:c3:70:9b:cb: 21:53:b4:24:30:fc:94:16:fc:d8:2b:6a:26:fc:02:03:cd:4c: e1:83:91:e4:a0:8c:66:dd:62:b2:f3:20:6d:78:ae:71:b6:db: 81:3e:f3:a9:17:94:c0:18:f5:b1:1d:ff:c3:14:c0:5f:2c:ff: f9:9c:b6:c2:dc:6e:2e:27:a4:1d:87:cd:4a:c7:44:1d:93:09: 84:ac:eb:4a:c1:bc:a6:c6:14:bd:7d:13:d3:ed:0d:6c:42:44: b6:d2:0f:77:92:d2:ee:d6:e0:19:21:f1:57:63:f5:47:03:87: 2b:b7:0f:bf:61:2e:79:44:73:05:9c:d5:c3:d3:33:2c:f5:fe: a7:d1:95:91:1b:28:7e:7c:8c:ba:75:b6:06:b6:b7:b7:70:f6: 9c:3d:e7:af:b9:ba:ed:4a:e1:a7:bd:44:d6:eb:b4:ae:c5:c2: 93:cd:fc:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy RjI1OUYwMTAwHhcNMjQwNTAyMTgxMzQyWhcNMjQwNTA5MTgxMzQyWjAYMRYwFAYD VQQDEw02NjMzZDdkNi02YjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmc0TphoN9gTaT5NJm0LJ6N+pCp4aeh5xhrmtVMvzy4wWXBwqM9Kedvv2L6y0 X75RuibVaqsk4Slc4qgfWP7Ss+YA2ioljJlSlu+cct0DfcZ7rZVhu0nltTVgqVYG 9RKWNhTgOsKpyIEfgN75wmFGprpW8RuGsiazWNVs+Kh27Uafuv6Qv/uWzj9XF2/G wsbDAswZ5c1Yz/WuAYU3zyEXWKI0k1cMfHkzlnwPQV6y+f95n1rI2o8DeiN5/jT5 CzIR7kjLVF1dU7rcttl7xpLN+rBDvasNxAC8HrHxPmhyAy56j9EkugA9voa7ncqC y4Y/eoSTrc6evfoz5BB3U3d2oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIx9ZNWO MvpjC84gfy+X/lIY2oFpMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkE0Qi81REE1QzI3NjNFRUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJE d1FUZTAyS3puenN2Slo4QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEhk5qYddc/O2Ou7znL0gYpWx1H7wb4MXE/9JB9i4r2M+dhIYrmMGY heii0UGLbgBMn8ZNVXB2dp+VghCUT0C8D6hhJ2w48TgrEcuRIkKVSsCnDOIR4sNw m8shU7QkMPyUFvzYK2om/AIDzUzhg5HkoIxm3WKy8yBteK5xttuBPvOpF5TAGPWx Hf/DFMBfLP/5nLbC3G4uJ6Qdh81Kx0QdkwmErOtKwbymxhS9fRPT7Q1sQkS20g93 ktLu1uAZIfFXY/VHA4crtw+/YS55RHMFnNXD0zMs9f6n0ZWRGyh+fIy6dbYGtre3 cPacPeevubrtSuGnvUTW67SuxcKTzfyt -----END CERTIFICATE-----Generated at Thu May 2 20:04:40 2024 by rpki-client on console-ams.rpki-client.org